improvement: make sure every package has an id field

fill the id field with sha256 for apt packages

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>